$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft File: bPYEPvYahE8I4lOhk9XZRlSWJ50.mft (raw, json) Hash identifier: /WXp+luqZMLxKtWu4NQcLsu0RHjtoHMFvg2dVO29RaM= Subject key identifier: B6:7F:60:53:B2:0D:77:64:D8:0E:25:71:BD:87:7E:98:7B:85:7F:79 Authority key identifier: 6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D Certificate issuer: /CN=A91F3D37/serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft Manifest number: 01AF Signing time: Tue 05 Aug 2025 03:36:41 +0000 Manifest this update: Tue 05 Aug 2025 03:36:40 +0000 Manifest next update: Tue 12 Aug 2025 03:36:40 +0000 Files and hashes: 1: bPYEPvYahE8I4lOhk9XZRlSWJ50.crl (hash: QzXh3NGGZS45dO58MG7ZsT+uYvfTgFEt++78eQG0pUQ=) 2: 6F67CF8CDCF111ED9828F232C4F9AE02.roa (hash: UUhAaQeYrl7H0iCSeqj7JAOZrw6JcIfsjlzbvaWf61k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3D37, serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D Validity Not Before: Aug 5 03:36:40 2025 GMT Not After : Aug 12 03:36:40 2025 GMT Subject: CN=68917c49-6af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:86:a9:13:dd:43:db:a2:49:18:21:c2:b3:29: 2e:49:e5:32:29:07:da:19:c3:18:14:4d:0d:40:44: fa:c5:2c:db:da:ba:cd:cd:38:7c:85:9e:1a:0c:e3: 7f:51:3a:5c:50:28:a0:3f:8d:31:fe:40:1a:ce:69: 8c:51:f2:46:79:95:29:e1:e0:6c:f4:d4:a5:0e:a2: 84:38:b7:1d:0b:98:f2:4b:2d:f6:8d:91:7c:ff:e0: 27:ae:2d:c2:4b:a1:0b:29:07:7d:32:8e:3f:79:5b: 1a:b8:b0:cf:57:a6:ee:3f:00:0a:bf:4b:bb:9e:6a: ca:59:4c:14:65:42:57:bd:af:a0:0f:4b:19:8c:d6: b9:a0:24:26:5d:1a:c6:8e:4d:4b:41:e2:83:fe:a5: 35:38:12:f1:14:0f:b6:63:2a:b0:4f:d8:1a:1c:e4: 28:51:16:4c:18:93:d4:37:d8:49:cd:91:05:42:21: 59:aa:6b:e1:bd:4e:10:0c:3a:25:69:76:98:c4:bf: 82:c3:a2:49:fd:67:52:33:bc:c5:ad:10:56:f4:8d: 66:60:fa:ad:80:1d:bb:6e:0d:ac:15:e3:a8:1c:2c: 91:31:aa:f1:2e:2a:a9:75:72:78:c4:4f:4a:de:ba: cb:6c:da:43:e4:f7:45:09:ee:03:f5:68:4c:91:0d: 90:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7F:60:53:B2:0D:77:64:D8:0E:25:71:BD:87:7E:98:7B:85:7F:79 X509v3 Authority Key Identifier: keyid:6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4d:a4:4f:74:68:ce:df:ac:2f:b3:26:ba:7b:f1:b1:74:45: d2:5c:23:06:29:76:84:44:5e:cc:e2:94:38:21:37:3e:7a:e9: bc:07:ff:67:91:34:66:6c:1b:db:6e:0f:41:36:9b:2a:9c:73: 7f:79:cc:d3:ee:3f:23:b2:0a:a6:2e:ae:a7:6e:a8:25:e1:ae: 42:85:c3:4f:a4:7b:9d:40:97:97:a8:0d:73:13:e7:f5:6d:be: 2a:86:f3:0e:85:a4:99:d5:9e:eb:42:6b:3f:d6:34:b1:42:c5: ee:89:c3:c3:e2:52:44:fd:ba:9a:0f:43:a0:d2:4b:25:f0:9b: c4:6f:0e:5a:9b:3d:96:40:d5:99:b2:c2:a7:5e:20:7a:4a:b7: 2f:88:51:e4:08:a2:b3:87:ae:41:4c:78:87:86:eb:f2:f9:b6: 51:93:da:78:cc:f1:e0:51:ec:a5:cf:e9:12:b5:f0:3c:aa:c6: d8:39:32:75:b5:2f:90:f8:32:2f:ec:84:2c:8f:29:f8:93:01: 68:4c:6f:fe:9a:24:97:68:5e:58:16:fc:d8:6b:60:1e:c6:aa: 3f:37:1a:6b:63:d2:9f:aa:ef:06:64:86:e6:a1:da:fe:a9:ee: 16:0b:75:ea:6f:d6:86:b4:5b:6a:35:f6:e2:00:9d:d2:55:d7: 63:39:1c:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNEMzcxMTAvBgNVBAUTKDZDRjYwNDNFRjYxQTg0NEYwOEUyNTNBMTkzRDVEOTQ2 NTQ5NjI3OUQwHhcNMjUwODA1MDMzNjQwWhcNMjUwODEyMDMzNjQwWjAYMRYwFAYD VQQDEw02ODkxN2M0OS02YWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIapE91D26JJGCHCsykuSeUyKQfaGcMYFE0NQET6xSzb2rrNzTh8hZ4aDON/ UTpcUCigP40x/kAazmmMUfJGeZUp4eBs9NSlDqKEOLcdC5jySy32jZF8/+Anri3C S6ELKQd9Mo4/eVsauLDPV6buPwAKv0u7nmrKWUwUZUJXva+gD0sZjNa5oCQmXRrG jk1LQeKD/qU1OBLxFA+2YyqwT9gaHOQoURZMGJPUN9hJzZEFQiFZqmvhvU4QDDol aXaYxL+Cw6JJ/WdSM7zFrRBW9I1mYPqtgB27bg2sFeOoHCyRMarxLiqpdXJ4xE9K 3rrLbNpD5PdFCe4D9WhMkQ2Q9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZ/YFOy DXdk2A4lcb2Hfph7hX95MB8GA1UdIwQYMBaAFGz2BD72GoRPCOJToZPV2UZUlied MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0QzNy81RUU5NzgyQURD RUUxMUVEOEMzOEQwMzFDNEY5QUUwMi9iUFlFUHZZYWhFOEk0bE9oazlYWlJsU1dK NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JQWUVQdllhaEU4STRsT2hrOVhaUmxTV0o1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0QzNy81RUU5NzgyQURDRUUxMUVEOEMzOEQwMzFDNEY5QUUwMi9iUFlFUHZZYWhF OEk0bE9oazlYWlJsU1dKNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLTaRPdGjO36wvsya6e/GxdEXSXCMGKXaERF7M4pQ4ITc+eum8B/9n kTRmbBvbbg9BNpsqnHN/eczT7j8jsgqmLq6nbqgl4a5ChcNPpHudQJeXqA1zE+f1 bb4qhvMOhaSZ1Z7rQms/1jSxQsXuicPD4lJE/bqaD0Og0ksl8JvEbw5amz2WQNWZ ssKnXiB6SrcviFHkCKKzh65BTHiHhuvy+bZRk9p4zPHgUeylz+kStfA8qsbYOTJ1 tS+Q+DIv7IQsjyn4kwFoTG/+miSXaF5YFvzYa2Aexqo/NxprY9Kfqu8GZIbmodr+ qe4WC3Xqb9aGtFtqNfbiAJ3SVddjORwM -----END CERTIFICATE-----Generated at Wed Aug 6 00:55:01 2025 by rpki-client